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Hello 


Welcome to the Data 
privacy moments tool. 


: By the end of this workshop you will have - 
Use this tool to: Who's needed?: 7 E 
¢ Acurrent-state user journey with 
e Map data-related risks to children in e Someone responsible for the service associated data-related risks 
your service and interface design 
¢ Identified new risks to address 
e Identify important moments to engage e Someone who knows how your service during your design process 
children with privacy information processes data 
¢ New information that could feed 
e Plan how to improve privacy e Someone with legal or data protection into your organisation's Data 
information in your service law knowledge Protection Impact Assessment 


° The ICO's best interests 
framework helps organisations 
assess how their service supports 
children's best interests and 
where there are risks. 


Use the Age-appropriate mindsets canvas to 
help you focus your thinking in this workshop. 


Use the Children's code design guidance theme 
Find the best moments to engage children 
with privacy information as reference. 


e Notes, questions and ideas on 
each of the risks you've identified 
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How to run this tool. 


Allow about 2 hours for this tool. 
You may need more time if you are working 
with 3 or more Age-appropriate mindsets. 


Steps to follow: 


Review the outputs of your 
Age-appropriate mindsets canvas. 
Copy the mindsets which relate to 
your users here. 


Map the steps taken in your end-to- 
end user journey for each mindset. 
Highlight the steps in which you collect 
or use personal data and add a short 
note on each of these 'risky moments’. 


Copy over each risky moment to a 
notes board and add more detail, 
questions, ideas and stakeholders. 


Timing: 


Review mindsets 
15 minutes 


Map user journey and risks 
30 minutes per mindset 


Notes, questions & ideas 
10 minutes per risky moment 


Tips: 


If you are working with 3 or more 
mindsets you may want to run this 
workshop in two sessions 


If you already have your product or 
service user journey mapped, use that 
as the basis for the steps 


You don't need to have all the answers 
or solutions. Use these notes to help you 
take action on the risks you've identified 
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Mindset 1 


& 
i 


Copy over a Mindset 
you've created using the 


Age-appropriate 


mindset tool. 


Please use the help on the next page, it will shape your understanding of what a mindset is. 
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Help ico. 


What are mindsets? 


A mindset is a set of needs and behaviours attributed 
to a person or group of people. 


mindsets help you to focus on your users fundamental 
motivations. They are broad enough to identify 
behavioural tendencies without prescribing personas. 


Mindset 
i ìs 


Use the ICO Age-appropriate mindsets tool to 
help you focus your thinking in this workshop. —————» 


ICO's age-appropriate mindset for 12 year olds 
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Map user journey and risks 
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Identify a 
step in the 
user's 
journey 


Personal Data 
How data is 
collected, used or 
shared 
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Risky moments 
Flag moments of 
risk to your young 
users' data privacy 
with triangles 
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means in the context of this tool. 
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Help 


What does 'risk' mean here? 


In this context, risk means potential harm you 
might expose children to because of the different 
ways you use their personal data. 


Your risks will be specific to your online service, 
but here are some examples: 


e Children sharing data with other users that 
leads to physical or emotional harm 
e (e.g. bullying or harassment) 


e Using personal data to recommend age- 
inappropriate or harmful content 


e Sharing data with third-parties for 
commercial gain that may not be in the 
child's best interests 
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What about the parent's role? 


For younger children in particular, parents or 
guardians will have important input. 


You can make note of this in your user journey, 


add another row of notes, or even create a separate 
journey for parents if needed. 


” 
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Notes, questions and ideas 


Risk notes SS ere Questions 
Copy over the : *% 2 % What do you need 
= Describe the . i 
notes from your : ee : Keep note to find out to 
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Top tip - Pri your data privacy moments map 
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Done! 


What's next? 


Keep a copy of this 


Save a version for your records to show 
you have thought about children's data 
privacy and transparency in practice 


Add insights from research 


Test your ideas, prototypes and 
solutions with children and add things 
that your learn to your moments maps 
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Keep this updated 


Do another version of this when your 
product or user journey changes, or if 
the age profile of your users changes 
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